The Pentagon says ‘hold my beer,’ falls victim to massive data breach affecting roughly 3,000,000 people
The Pentagon has confirmed a significant cybersecurity breach affecting approximately 3 million people, with the Defense Manpower Data Center (DMDC) information system falling victim to unauthorized access of personally identifiable information. According to a US defense official, the breach lasted from October 2025 through July, surpassing a recently reported FBI data breach in both scope and duration.
The compromised data includes personally identifiable information belonging to civilian US government employees and active military personnel. The breach was perpetrated by what officials described as a “small number of unauthorized users,” though the full extent of their access and any subsequent data theft remains under investigation.
This incident represents a serious vulnerability in critical US defense infrastructure and comes amid heightened concerns about cybersecurity threats targeting federal agencies. The timing—occurring just weeks after the FBI data breach in which attackers claimed to have stolen data on all FBI employees—raises alarm about potential coordinated efforts or systemic security weaknesses across multiple government agencies.
The breach underscores ongoing challenges facing the Pentagon and other federal institutions in protecting sensitive personnel data. DMDC is responsible for maintaining records on millions of military service members and defense employees, making this breach particularly concerning given the potential for identity theft, security clearance exploitation, and other forms of misuse of the compromised information.